GDPR
Privacy policy
Data controller
The controller of personal data collected on thegranges.fr is:
- Company
- Société d'Exploitation des Granges de Béthencourt (SAS)
- SIREN
- 995 320 330
- Address
- 22 rue Jean Jaurès, 59540 Béthencourt, France
- Representative
- Guillaume Aubry, President
- GDPR contact
- lesgrangesdebethencourt@gmail.com
- DPO
- None appointed (the company does not meet the mandatory designation criteria of Article 37 GDPR).
Data we collect
We collect only the data strictly necessary for the purposes described below. You are never required to give us personal information to browse the site.
| Source | Data collected | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Brevo Conversations chat | Email address, first name (if provided), message content, session ID, IP address | Reply to your enquiries | Consent (GDPR art. 6.1.a) | 3 years from last contact |
| Ulule sign-up link | No data is collected by our site — sign-ups are processed by Ulule under their own policy | Notify you of the campaign launch | Handled by Ulule | See Ulule policy |
| Embedded YouTube video | No data is transmitted until you start playback (youtube-nocookie mode) | Video playback | Consent to playback | Handled by YouTube |
| Server logs (Vercel) | IP address, user-agent, page accessed, timestamp | Security, anonymised audience statistics, abuse prevention | Legitimate interest (GDPR art. 6.1.f) | 30 days |
Recipients of your data
Your data is never sold, rented or exchanged. It is accessible only to authorised personnel within the company and to the following technical processors:
- Vercel Inc. (site hosting) — United States. Transfer governed by EU Standard Contractual Clauses and the Data Privacy Framework.
- Sendinblue SAS / Brevo (chat and messaging) — France. Brevo policy.
- Google Ireland Ltd. (Google Fonts, YouTube playback if triggered) — Ireland, with transfers to the United States covered by the DPF.
- Ulule (crowdfunding campaign) — France, for launch sign-ups.
Cookies and trackers
The site uses no advertising cookies and no third-party audience-measurement cookies. The cookies set are strictly necessary:
- Brevo session cookies (chat) — session-only, required for the conversation widget. Set only if you interact with the chat.
- YouTube cookies — set only if you start playback of the embedded video (privacy-enhanced mode).
No cookie is set for advertising or cross-site tracking. You can configure your browser at any time to block these cookies.
Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights regarding your personal data:
- Access — obtain a copy of the data concerning you;
- Rectification — correct inaccurate or incomplete data;
- Erasure — request the deletion of your data;
- Object — object to the processing of your data;
- Restriction — restrict the use of your data;
- Portability — receive your data in a structured format;
- Withdraw consent — withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.
To exercise these rights, contact us at lesgrangesdebethencourt@gmail.com. You will receive a reply within one month.
Complaint
If you believe your data is not being processed in accordance with the regulations, you have the right to lodge a complaint with the French data-protection authority CNIL: cnil.fr/en/plaints.
Changes
This policy may be updated at any time, in particular to reflect technical or regulatory changes or new site features. The date of the last update is shown below.
Last updated: 14 May 2026